hex mongooseim vulnerabilities

Latest hex mongooseim CVEs

Newest publication first

1. CVE-2014-2829 Erlang Solutions MongooseIM vulnerable to denial of service (DoS) via crafted XMPP stream

   Published 2014-04-11

   High·CVSS 7.8 EPSS 2.0%

   Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.